Open Source Security Foundation
industry forum for the improvement of the security of open source software
The Open Source Security Foundation (OpenSSF) is a cross-industry forum for collaborative improvement of open-source software security. Part of the Linux Foundation, the OpenSSF works on various technical and educational initiatives to improve the security of the open-source software ecosystem.
History
The OpenSSF was formed in August 2020 as the successor to the Core Infrastructure Initiative, another Linux Foundation project.
In October 2021, Brian Behlendorf was announced as the OpenSSF's first full-time general manager. In May 2023, OpenSSF announced Omkhar Arasaratnam as its new general manager, and Behlendorf became CTO of the organization.
Activity
Working groups and projects
The OpenSSF houses various initiatives under its 10 current working groups. The OpenSSF also houses two projects: the code signing and verification service Sigstore and Alpha-Omega, a large-scale effort to improve software supply chain security.
Policy
The White House held a meeting on software security with government and private sector stakeholders on January 13, 2022. In May 2022, the OpenSSF hosted a follow-up meeting, the Open Source Software Security Summit II, where participants from industry agreed on a 10-point Open Source Software Security Mobilization Plan, which received $30 million in funding commitments. In August 2023, the OpenSSF served as an advisor for DARPA's AI Cyber Challenge (AIxCC), a competition around innovation around AI and cybersecurity.
“Open Source Security Foundation” enters the record as industry forum for the improvement of the security of open source software. Crown Archives preserves that source wording while asking what Source, Security and Foundation can confirm, complicate or overturn.
Why this record matters
“Open Source Security Foundation” is worth following because a concise public description often conceals a longer documentary argument. Here, Source, Security and Foundation provides the most credible route into that argument.
Datasets, specimens, observations and peer-reviewed methods provide the appropriate test for the technical claims summarized here. The source revision retrieved here is dated Apr 26, 2026. The linked authority identifier is Q104245202. None of the 1 selected statements returned an explicit reference. The first chronological checks are 2020, 2021, 2023 and 2022.
Current terminology should not be projected backward without checking the classification used when the underlying evidence was created. The source lead contains qualifying language; that uncertainty should survive quotation, summary and reuse. Authority statements aid reconciliation but still require their own references, qualifiers and ranks to be checked.
How to read it
Check terminology, classification and the date of the cited evidence. Scientific names and technical consensus can change while older records retain historical value.
- Current terminology
- Classification context
- Finding cited technical literature
Primary datasets, specimen catalogues, standards bodies and the most recent peer-reviewed literature.
Three-step research path
- Establish the record: confirm the title “Open Source Security Foundation”, its source revision and the description used here.
- Expand the search: follow Open Source Security Foundation primary sources, Open Source Security Foundation archive and Source research across catalogues and specialist indexes.
- Test the account: compare the strongest cited source with the responsible institution’s current record and note any disagreement.
Questions for further research
- Which source most directly establishes the central claim about “Open Source Security Foundation”?
- Has classification or technical consensus changed since the cited source?
- Which observation, specimen, dataset or publication supports the account?
Search terms from this dossier
This entry incorporates text from “Open Source Security Foundation” on English Wikipedia. Contributors are listed in the page history. Text is available under the Creative Commons Attribution-ShareAlike 4.0 License. Selected authority identifiers and statements are retrieved from Wikidata under CC0; their references and qualifiers remain part of the verification path.